Nexar dashcam video database hacked

A hacker cracked into a database of video recordings taken from Nexar-branded dashcams, exposing more than 130 TB of data stored in an improperly secured Amazon Web Services bucket, according to Malwarebytes. The breach was attributed to a Nexar camera that contained a high-privilege key enabling uploads from any camera as well as access to others’ data. The hacker, who provided a clip to 404 Media as proof, claimed it would be surprising if no one was already tapping Nexar customer data.

According to the document cited by 404 Media, Nexar lists companies and organisations that have had access to its data, including Apple, Microsoft, Amazon, Google, Niantic, Lyft, Waymo, the cities of Los Angeles and Austin, and the NYPD. Nexar fixed the issue after being contacted by 404 Media, but Malwarebytes notes that the breach has seriously damaged trust in a company that stores dashcam or CCTV images.